Methods for provisioning universal integrated circuit cards

FIELD OF THE DISCLOSURE

p-0002The subject disclosure relates to methods for provisioning universal integrated circuit cards.

BACKGROUND

p-0003Mobile Network Operators (MNOs) generally provide each subscriber a communication device with a Universal Integrated Circuit Card (UICC), commonly known as a Subscriber Identity Module or SIM card, which enables the communication device to authenticate and access a mobile network. In some instances the SIM card can be removed by the subscriber and inserted in an alternate communication device, providing the subscriber continuity of network access and services from device to device. A subscriber can switch subscription to another MNO by physically swapping one SIM card for another.

p-0004In an environment involving machine-to-machine communications, it is common for a UICC to be placed in harsh environments such as a communication device located in an automobile engine, or atop a streetlight, which is not easily accessible. In such applications the UICC is often embedded in the communication device and not physically replaceable. When a subscriber of a device utilizing an embedded UICC wishes to switch to another MNO, the subscriber may have to replace the device.

BRIEF DESCRIPTION OF THE DRAWINGS

p-0005Reference will now be made to the accompanying drawings, which are not necessarily drawn to scale, and wherein:

p-0006<figref idrefs="DRAWINGS">FIG. 1</figref> depicts an illustrative embodiment of a first method used by a telecommunications network shown in <figref idrefs="DRAWINGS">FIG. 2</figref>;

p-0007<figref idrefs="DRAWINGS">FIG. 3</figref> depicts an illustrative embodiment of a second method used by a telecommunications network shown in <figref idrefs="DRAWINGS">FIG. 4</figref>;

p-0008<figref idrefs="DRAWINGS">FIG. 5</figref> depicts an illustrative embodiment of a third method used by a telecommunications network in <figref idrefs="DRAWINGS">FIG. 6</figref>;

p-0009<figref idrefs="DRAWINGS">FIG. 7</figref> depicts an illustrative embodiment of a communication device that embodies in whole or in part devices of <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b>; and

p-0010<figref idrefs="DRAWINGS">FIG. 8</figref> is a diagrammatic representation of a machine in the form of a computer system within which a set of instructions, when executed, may cause the machine to perform any one or more of the methods described herein.

DETAILED DESCRIPTION

p-0011The subject disclosure describes, among other things, illustrative embodiments for managing content and memory allocated to applications of a universal integrated circuit card (UICC). Other embodiments are included in the subject disclosure.

p-0012One embodiment of the subject disclosure includes a method for receiving, by a secure element issuer system, a request to modify a universal integrated circuit card, generating, by the secure element issuer system, a package comprising configuration data for modifying the universal integrated circuit card, and instructing, by the secure element issuer system, an over-the-air system to transmit the package. The method further includes encrypting, by the over-the-air system, the package with a transport key to generate an encrypted package, and transmitting, by the over-the-air system, the encrypted package to a communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card. The method can also include providing, by the secure element issuer system, a mobile network operator trusted service manager system information relating to the configuration data to enable the mobile network operator trusted service manager system to manage content and memory allocation of the universal integrated circuit card.

p-0013One embodiment of the subject disclosure includes a method for receiving, by a mobile wallet trusted service manager system, a request to modify content in a mobile wallet security domain container of a universal integrated circuit card, verifying, by the mobile wallet trusted service manager system, that resources of the universal integrated circuit card and a communication device communicatively coupled to the universal integrated circuit card are capable of satisfying the request, generating, by the mobile wallet trusted service manager system, a script according to the request, encrypting, by the mobile wallet trusted service manager system, the script according to an application key to generate an encrypted script, and instructing, by the mobile wallet trusted service manager system, an over-the-air system to transmit the encrypted script. The method can also include generating, by the an over-the-air system, a package comprising the encrypted script and transport data, encrypting, by the an over-the-air system, the package with a transport key to generate an encrypted package, and transmitting, by the over-the-air system, the encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the content of the mobile wallet security domain container of the universal integrated circuit card. The method can further include providing, by the mobile wallet trusted service manager system, a mobile network operator trusted service manager system information relating to the provisioning of the mobile wallet security domain to manage content and memory allocation of the universal integrated circuit card.

p-0014One embodiment of the subject disclosure includes a method for receiving, by a subscription management secure routing system of a first service provider, a first encrypted package, wherein the first encrypted package is encrypted by a subscription management data preparation system with an application key responsive to the subscription management data profile system receiving a request from a second service provider to modify a universal integrated circuit card with configuration data, and sending, by the subscription management secure routing system of the first service provider, to an over-the-air system of the first service provider a second package comprising the first encrypted package and transport data. The method can also include encrypting, by the over-the-air system of the first service provider, the second package with a transport key to generate an encrypted second package, and transmitting, by the over-the-air system of the first service provider, the encrypted second package to a communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card with the configuration data. The method can further include providing, by the subscription management secure routing system of the first service provider, a mobile network operator system of the first service provider information relating to the configuration data to enable the mobile network operator trusted service manager system of the first operator to manage content and memory allocation of the universal integrated circuit card.

p-0015<figref idrefs="DRAWINGS">FIG. 1</figref> depicts an illustrative embodiment of a first method used by a telecommunications network <b>200</b> shown in <figref idrefs="DRAWINGS">FIG. 2</figref>. The telecommunications network <b>200</b> can comprise four communication layers: 1) a service provider layer, 2) a service management layer, 3) an over-the-air (OTA) layer, and 4) a device layer. The service provider layer can comprise a number of systems such as a service provider payment system, a service provider non-payment system, a trusted execution environment service provider system (TEE SP), a subscription management data preparation system (SM-DP), a Telco secure element issuer system (Telco SEI), and a mobile network operator (MNO) Telco.

p-0016The service management layer can comprise a mobile wallet trusted service manager system (MW TSM), a third party service provider TSM, and a Telco remote management function system. The Telco remote management function system can integrate an MNO TSM system, a subscription management secure routing system (SM-SR) system, and a TEE management system. The OTA layer can comprise a mobile wallet (MW) OTA, a Telco MNO TSM OTA, and a legacy Telco OTA. The device layer can comprise a communication device <b>206</b> using a UICC <b>208</b>. In one embodiment, the UICC <b>208</b> can be removable from the communication device <b>206</b>. The encryption keys referred to in <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b>, which will be described further below, particularly, the transport key, application key, and the TEE key are managed and stored by a key management system <b>211</b> shown in <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b>. Other encryption keys not mentioned in the subject disclosure, but applicable to the subject disclosure, can also be stored and managed by the key management system <b>211</b>. The encryption keys described in the subject disclosure can be used for encryption as well as authentication purposes.

p-0017In an alternate embodiment, the UICC can be embedded in (i.e., not readily removable from) the communication device <b>206</b>. An embedded UICC may be referred to in the subject disclosure as an eUICC. The communication device <b>206</b> can be a portable communication device such as a cellular telephone. In another embodiment, the communication device <b>206</b> can be affixed to a structure, a building, an automobile, a meter, or other suitable devices that may or may not be transitory. In this latter embodiment, the communication device <b>206</b> can provide a service center telemetry information, and/or enable the service center to control aspects of the device it is affixed to.

p-0018The TEE referenced above is defined by a standards organization known as a Global Platform. It is recognized by the Global Platform that modern devices, such as a smartphone, offer a Rich Execution Environment (REE), providing an extensive and versatile operating environment. This brings flexibility and capability, but at the same time leaves the device vulnerable to a wide range of security threats. The TEE can be designed to reside alongside the REE and provide a safe area of the device to protect assets and execute trusted code. A TEE can be an execution environment that runs alongside but isolated from an REE. The TEE has security capabilities and meets certain security-related requirements such as protecting TEE assets from general software attacks, defining rigid safeguards as to data and functions that a program can access, and resisting a set of defined threats. There are multiple technologies that can be used to implement a TEE, and the level of security achieved varies accordingly.

p-0019The TSM referenced above is also defined by the Global Platform standards organization. It is recognized by the Global Platform that the TSM can be a trusted third party, which provides one or more technical roles and possibly business roles to other actors in a telecommunications environment. A TSM is trusted by the other actors to be in charge of service management and delivery. The TSM acts as an aggregator and may simultaneously support several service providers and mobile network operators while maintaining confidentiality between the actors.

p-0020The MNO TSM referenced above is not defined by the Global Platform standards organization, but is widely referred to in the industry. The MNO TSM implements one or more aspects of SDM (Security Domain Management) as defined by Global Platform on behalf of an MNO (Mobile Network Operator). The SP TSM referenced above is also not defined by the Global Platform standards organization, but is widely referred to in the industry. The SP TSM implements one or more aspects of SDM (Security Domain Management) as defined by Global Platform on behalf of a SP (Service Provider).

p-0021A secure element (SE) is also a term defined by the Global Platform standards organization. It is recognized by the Global Platform that the SE is a component in a communication device providing the security and confidentiality required to support various business models. An SE can exist in any form factor such as a UICC, an Embedded SE, a Secure Memory Card, etc.

p-0022The SEI referenced above is also defined by the Global Platform standards organization. It is recognized by the Global Platform that the SEI role holds the ultimate responsibility for the Global Platform card. It has the responsibility to develop the card product profile, to choose the platform and application technologies to a design card layout. It usually holds a particular Security Domain in the SE, the Issuer Security Domain (ISD). Card Content Management (CCM) operations that can be performed on the ISD are associated to the Security Domain Manager role that an SE provider may also play.

p-0023A security domain (SD) is also a term defined by the Global Platform standards organization. It is recognized by the Global Platform that SD's act as the on-card representatives of off-card authorities. There are three main types of SD, reflecting the three types of off-card authority recognized by a card: <ul><li id="ul0001-0001" num="0000"><ul><li id="ul0002-0001" num="0023">The Issuer Security Domain is the primary, mandatory on-card representative of the Card Administrator, typically the Card Issuer;</li><li id="ul0002-0002" num="0024">Supplementary Security Domains are additional, optional on-card representatives of Application Providers or the Card Issuer, or their agents (e.g. service bureaus);</li><li id="ul0002-0003" num="0025">Controlling Authority Security Domains are a special type of Supplementary Security Domain. A Controlling Authority may exist whose role is to enforce the security policy on all application code loaded to the card. If so, the Controlling Authority also uses this type of Security Domain as its on-card representative. There may be more than one such Security Domain.</li></ul></li></ul>

p-0024The three types of SDs described above are referred to simply as SDs in the subject disclosure. SDs support security services such as key handling, encryption, decryption, digital signature generation and verification for their providers' (Card Issuer, Application Provider or Controlling Authority) applications. Each SD is established on behalf of a Card Issuer, an Application Provider or a Controlling Authority when these off-card entities require the use of keys that are completely isolated from each other.

p-0025The SM-SR referenced above is defined by the GSM Association (GSMA). It is recognized by the GSMA that the SM-SR securely performs functions which directly manage the operational and provisioning profiles on the eUICC (and possibly in future specifications promulgated by the GSMA the UICC). The SM-DP referenced above is also defined by the GSMA. It is recognized by the GSMA that the SM-DP prepares operational and provisioning profiles to be securely provisioned on the eUICC (and possibly the UICC), e.g. encryption of a profile.

p-0026Portions of the systems of <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b> can be described in part by standards organizations that generate specifications for consistent application of services. Illustrations of such specifications include, without limitation, Messaging Specification for Management of Mobile-NFC (GPS_SPE_—002); TEE System Architecture (GPD_SPE_—009); Reprogrammable SIMs: Technology, Evolution and Implications as prepared by OFCOM; Card Specification (GPC_SPE_—034), each of the aforementioned specifications and subsequent derivatives being incorporated herein by reference in their entirety.

p-0027Referring to <figref idrefs="DRAWINGS">FIG. 2</figref>, the telecommunications system <b>200</b> illustrated therein can be managed in part according to method <b>100</b> shown in <figref idrefs="DRAWINGS">FIG. 1</figref>. Method <b>100</b> can begin with step <b>102</b> in which a Telco SEI <b>202</b> receives a request to modify the UICC <b>208</b> of communication device <b>206</b>. For illustration purposes only, <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b> show two types of UICCs (removable and embedded). However, it will be understood in the subject disclosure that methods <b>100</b>, <b>300</b> and <b>500</b> of <figref idrefs="DRAWINGS">FIGS. 1</figref>, <b>3</b> and <b>5</b>, respectively, can be applied to removable or embedded UICCs.

p-0028In step <b>104</b>, the Telco SEI can generate a package including configuration data to modify the UICC <b>208</b>. The configuration data can comprise one or more authentication keys, one or more network access parameters, one or more service operator applications, or combinations thereof. In one embodiment, the service operator application can be a network-based application that configures the communication device <b>206</b> to comply with operational requirements of a communication system from which the communication device <b>206</b> receives communication services. The network-based application can be a subscriber identity module (SIM) application, a universal subscriber identity module (USIM) application, or an internet protocol multimedia services identity module (ISIM) application. The UICC executes the SIM application, the USIM application, or the ISIM application depending on whether the network of <figref idrefs="DRAWINGS">FIG. 1</figref> operates as a 2G, 3G, LTE or IMS (IP Multimedia Subsystem) network.

p-0029At step <b>106</b>, the Telco SEI can instruct an OTA system <b>204</b> to transmit the package. The OTA system <b>204</b> can perform this step by generating transport data which is combined with the package provided by the Telco SEI and encrypted with a transport key in step <b>108</b>. At step <b>110</b>, the OTA system <b>204</b> transmits the encrypted package to the communication device <b>206</b>. The communication device <b>206</b> delivers at step <b>112</b> the encrypted package to the UICC <b>208</b> which decrypts it with its own transport key. Once decrypted, the UICC <b>208</b> provisions itself according to the configuration data. Steps <b>102</b>-<b>112</b> can represent a legacy process currently used by existing telecommunications operators to program a UICC.

p-0030At step <b>114</b>, the Telco SEI provides the MNO TSM of the Telco remote management function system <b>210</b> information relating to the configuration data to enable the MNO TSM to manage content and memory allocation of the UICC <b>208</b>. The information provided to the MNO TSM can be any portion of the configuration data useful for managing content and memory of the UICC <b>208</b>. In step <b>116</b>, the MNO TSM can use the information provided in step <b>114</b> to manage content and memory allocated to SD containers of the UICC <b>208</b>. The MNO TSM can update content and memory allocation in several ways. For example, it can modify content, remove content, or add content. The MNO TSM can also allocate more or less memory to any of the SD containers, or remove an SD container if necessary. Such updates can occur as needed in step <b>130</b>.

p-0031Independent of the MNO TSM's role, a TEE service provider (SP) <b>203</b> can generate a second package encrypted with a TEE key for delivery to the communication device <b>206</b>. Alternatively, the TEE Management Function <b>210</b> can generate the second package encrypted with the TEE key. The second package can include a trusted application to be executed by the communication device <b>206</b>, which, for example, may have been purchased by the subscriber of the communication device <b>206</b>. The TEE SP <b>203</b> or TEE Management Function <b>210</b> can also check that the communication device <b>206</b> and UICC <b>208</b> are capable of executing the trusted application before the second package is transmitted. This can be accomplished by way of a database lookup to determine available resources of the communication device <b>206</b> and UICC <b>208</b>. The second encrypted package can be further encrypted by the OTA system <b>204</b> in step <b>120</b> with a transport key, and transmitted to the TEE function <b>207</b> of the communication device <b>206</b>, which may operate outside of the UICC <b>208</b>. The TEE function <b>207</b> can decrypt the second package with the transport key and the TEE key. In step <b>122</b>, the TEE SP <b>203</b> or TEE Management Function <b>210</b> can provide the MNO TSM information relating to the transaction (such as the addition of content, details about the content, etc.) to enable the MNO TSM to continue managing content and memory allocation of the UICC.

p-0032The MNO TSM discussed in the foregoing embodiments can perform a central function of managing content and memory allocation of the UICC <b>208</b>. The MNO TSM can serve a role of consolidating all actions of any system whether managed by the same service provider or unaffiliated service providers.

p-0033Referring to the telecommunications system <b>200</b> as depicted in <figref idrefs="DRAWINGS">FIG. 4</figref>, such system <b>200</b> can be managed in part according to method <b>300</b> shown in <figref idrefs="DRAWINGS">FIG. 3</figref>. Method <b>300</b> can begin with step <b>302</b> in which a mobile wallet trusted manager system (MW TSM) <b>404</b> receives a request from a service provider payment system <b>402</b> to add, remove or update a mobile wallet service of the UICC <b>208</b>. This step can represent, for example, adding, removing or updating a credit card account service, bank account service, or other suitable payment mechanism of a user, which is managed by way of the UICC <b>208</b>.

p-0034At step <b>304</b>, the MW TSM <b>404</b> can verify that the UICC <b>208</b> and the communication device <b>206</b> are capable of satisfying the request. In one embodiment, step <b>304</b> can represent a validation that the communication device <b>206</b> and UICC <b>208</b> have the computing resources and encryption technology to perform the requested task. Step <b>304</b> can be performed by the MW TSM <b>404</b> by retrieving information from a local or remote database that maintains records descriptive of resources available for communication devices and their corresponding UICC's, a log of mobile wallet SD containers in use, and so on. In another embodiment, step <b>304</b> can result in the MW TSM <b>404</b> communicating with the MNO TSM <b>210</b> to inquire about content and memory allocated to the UICC <b>208</b> as an additional or alternate validation process for determining whether the request can be satisfied.

p-0035Once the MW TSM <b>404</b> validates that the communication device <b>206</b> and UICC <b>208</b> can satisfy the request, the MW TSM <b>404</b> proceeds to step <b>306</b> where it generates a script encrypted with an application key and instructs an MW OTA system <b>406</b> to transmit the encrypted script. At step <b>308</b> the MW OTA system <b>406</b> generates an encrypted package with the transport key that includes the encrypted script and transport data. The MW OTA system <b>406</b> transmits in step <b>310</b> the encrypted package to the communication device <b>206</b>. The communication device <b>206</b> then conveys the encrypted script at step <b>312</b> to the UICC <b>208</b> for processing the mobile wallet script in a mobile wallet SD container.

p-0036At step <b>314</b> the MW TSM <b>404</b> provides the MNO TSM <b>210</b> information relating to the script and/or the MW SD container to enable the MNO TSM <b>210</b> to further manage content and memory allocation of the UICC <b>208</b> at step <b>316</b>. As in the method of <figref idrefs="DRAWINGS">FIG. 1</figref>, the MNO TSM <b>210</b> manages content and memory of the UICC <b>208</b> as updates are detected in step <b>330</b>. For instance, the MW TSM <b>404</b> can be called on to provision the UICC <b>208</b> with additional MW SD containers. In this instance, steps <b>302</b> through <b>330</b> would be invoked, and the MNO TSM <b>210</b> at step <b>330</b> would be informed of these updates, and would use the additional information provided by the MW TSM <b>404</b> to continue to management memory and content of the UICC <b>208</b>. Additionally, updates to the communication device <b>206</b> can also occur which can cause additional updates to be conveyed to the MNO TSM <b>210</b>. For example, if a new trusted application is generated by the TEE SP <b>203</b> or TEE Management Function <b>210</b> causing the execution of steps <b>318</b> through <b>322</b>, the MNO TSM <b>210</b> detects the update in step <b>330</b> and updates its records to continue managing content and memory allocated to the SD containers of the UICC <b>208</b>. As before, the MNO TSM <b>210</b> can be a central authority for managing content and memory allocated to the UICC <b>208</b> (and in some instances the communication device <b>206</b>) as third party providers make updates to the UICC <b>208</b> (or the communication device <b>206</b>). The MNO TSM <b>210</b> can at all add or reduce memory allocated to any of the SD containers and/or remove SD containers if necessary to maintain a balanced use of resources of the UICC <b>208</b>.

p-0037Referring to the telecommunications system <b>200</b> as depicted in <figref idrefs="DRAWINGS">FIG. 6</figref>, such system <b>200</b> can further be managed in part according to method <b>500</b> shown in <figref idrefs="DRAWINGS">FIG. 5</figref>. Method <b>500</b> can begin with step <b>502</b> where the SM DP <b>602</b> receives a request from an MNO <b>608</b> to modify a UICC <b>604</b>. This step can represent a transfer of service from one MNO to another MNO, or the instantiation of new service with an MNO for a communication device that has yet to be brought into service. At step <b>504</b> the SM DP <b>602</b> generates a first package with configuration data to satisfy the request generated by the MNO <b>608</b>. The first package is encrypted by the SM DP <b>602</b> with an application key. In step <b>506</b>, the SM DP <b>602</b> transmits the first encrypted package to an SM-SR system of a first service provider (SM-SR SP1) <b>210</b>. The SM-SR SP 1 <b>210</b> sends the OTA system of the same service provider (OTA SP1) <b>204</b> a second package including the first encrypted package and transport data. At step <b>510</b>, the OTA SP1 <b>204</b> encrypts the second package with a transport key and transmits it to communication device <b>604</b> for provisioning the UICC <b>606</b>. Although the communication device <b>604</b> is shown to use an embedded UICC, method <b>500</b> is also applicable to removable UICCs. The communication device <b>604</b> then delivers at step <b>512</b> the second encrypted package to the UICC <b>606</b>, which it decrypts with the transport and application keys for provisioning the UICC <b>606</b>. At step <b>514</b>, the SM-SR SP1 <b>210</b> provides the MNO TSM of the same service provider (MNO TSM SP1) <b>210</b> information relating to the configuration data used to provision the UICC <b>606</b> to enable in step <b>516</b> the MNO TSM SP1 <b>210</b> to manage content and memory allocation of the UICC <b>606</b>.

p-0038It should be noted that SM-SR SP1 <b>210</b> and the MNO TSM SP1 <b>210</b> can be integrated in a common system such as the remote management function system <b>210</b> of the first service provider. Similarly, the TEE management system of the first service provider (TEE SP1) can also be integrated in the remote management function system <b>210</b>. The remote management function system <b>210</b> can comprise a number of servers operating cooperatively and managed exclusively by the first service provider.

p-0039Referring back to <figref idrefs="DRAWINGS">FIG. 5</figref>, as UICC updates occur, the MNO TSM SP1 <b>210</b> is informed at step <b>518</b> of such updates to continuing manage content and memory allocated to the UICC <b>606</b>. As before the MNO TSM SP1 <b>210</b> can increase or decrease memory allocated to SD containers of the UICC <b>606</b> or remove one or more SD containers.

p-0040Once the UICC <b>606</b> has been provisioned at step <b>512</b>, the MNO system <b>608</b> of the other service provider can further provision the UICC <b>606</b> by way of an MNO OTA system <b>610</b> of the other service provider. In one embodiment, the first service provider may have arrangements with other service providers to delegate management of UICC's when subscribers switch MNO's. If the first service provider determines at step <b>520</b> that a subscriber has switched to another service provider, which has a pre-arrangement with the first service provider, then the MNO TSM SP1 <b>210</b> can delegate content and memory management of the UICC <b>606</b> to an MNO TSM of the other service provider (MNO TSM SP2), not shown in <figref idrefs="DRAWINGS">FIG. 6</figref>. The delegation can be performed by the MNO TSM SP1 <b>210</b> transmitting to the MNO TSM SP2 sufficient information to enable the MNO TSM SP2 to manage content and memory of the UICC <b>606</b> from where the MNO TSM SP1 <b>210</b> left off. Once the transfer is complete, the MNO TSM SP2 can begin managing content and memory allocated to the UICC <b>606</b>. Delegation between MNO TSM's of managing content and memory of UICC's can be performed multiple times subscribers switch between MNO's.

p-0041<figref idrefs="DRAWINGS">FIG. 7</figref> depicts an illustrative embodiment of a communication device <b>700</b>. Communication device <b>700</b> can be in whole or in part an illustrative embodiment of the devices depicted in <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b> and <b>6</b>. The communication device <b>700</b> can be configured with the features described in methods <b>100</b>, <b>300</b> or <b>600</b>.

p-0042To perform the above features, each of the one or more instances of the communication device <b>700</b> can comprise a wireline and/or wireless transceiver <b>702</b> (herein transceiver <b>702</b>), a user interface (UI) <b>704</b>, a power supply <b>714</b>, a location receiver <b>716</b>, a motion sensor <b>718</b>, an orientation sensor <b>720</b>, a universal integrated circuit card (UICC) <b>730</b>, and a controller <b>706</b> for managing operations thereof. The transceiver <b>702</b> can support short-range (e.g., WiFi or Near Field Communications-NFC) or long-range wireless access technologies such as cellular communication technologies including, for example, CDMA-1X, UMTS/HSDPA, GSM/GPRS, TDMA/EDGE, EV/DO, WiMAX, SDR, LTE, as well as other next generation wireless communication technologies as they arise. The transceiver <b>702</b> can also be adapted to support circuit-switched wireline access technologies (such as PSTN), packet-switched wireline access technologies (such as TCP/IP, VoIP, IP Multimedia Subsystem, etc.), and combinations thereof.

p-0043The UI <b>704</b> can include a depressible or touch-sensitive keypad <b>708</b> with a navigation mechanism such as a roller ball, a joystick, a mouse, or a navigation disk for manipulating operations of the communication device <b>700</b>. The keypad <b>708</b> can be an integral part of a housing assembly of the communication device <b>700</b> or an independent device operably coupled thereto by a tethered wireline interface (such as a USB cable) or a wireless interface supporting for example Bluetooth. The keypad <b>708</b> can represent a numeric keypad commonly used by phones, and/or a QWERTY keypad with alphanumeric keys. The UI <b>704</b> can further include a display <b>710</b> such as monochrome or color LCD (Liquid Crystal Display), OLED (Organic Light Emitting Diode) or other suitable display technology for conveying images to an end user of the communication device <b>700</b>. In an embodiment where the display <b>710</b> is touch-sensitive, a portion or all of the keypad <b>708</b> can be presented by way of the display <b>710</b> with navigation features.

p-0044The display <b>710</b> can use touch screen technology to also serve as a user interface for detecting user input. As a touch screen display, the communication device <b>700</b> can be adapted to present a user interface with graphical user interface (GUI) elements that can be selected by a user with a touch of a finger. The touch screen display <b>710</b> can be equipped with capacitive, resistive or other forms of sensing technology to detect how much surface area of a user's finger has been placed on a portion of the touch screen display. This sensing information can be used to control the manipulation of the GUI elements or other functions of the user interface. The display <b>710</b> can be an integral part of the housing assembly of the communication device <b>400</b> or an independent device communicatively coupled thereto by a tethered wireline interface (such as a cable) or a wireless interface.

p-0045The UI <b>704</b> can also include an audio system <b>712</b> that utilizes audio technology for conveying low volume audio (such as audio heard in proximity of a human ear) and high volume audio (such as speakerphone for hands free operation). The audio system <b>712</b> can further include a microphone for receiving audible signals of an end user. The audio system <b>712</b> can also be used for voice recognition applications. The UI <b>704</b> can further include an image sensor <b>713</b> such as a charged coupled device (CCD) camera for capturing still or moving images.

p-0046The power supply <b>714</b> can utilize common power management technologies such as replaceable and rechargeable batteries, supply regulation technologies, and/or charging system technologies for supplying energy to the components of the communication device <b>700</b> to facilitate long-range or short-range portable applications. Alternatively, or in combination, the charging system can utilize external power sources such as DC power supplied over a physical interface such as a USB port or other suitable tethering technologies.

p-0047The location receiver <b>716</b> can utilize location technology such as a global positioning system (GPS) receiver capable of assisted GPS for identifying a location of the communication device <b>700</b> based on signals generated by a constellation of GPS satellites, which can be used for facilitating location services such as navigation. The motion sensor <b>718</b> can utilize motion sensing technology such as an accelerometer, a gyroscope, or other suitable motion sensing technology to detect motion of the communication device <b>700</b> in three-dimensional space. The orientation sensor <b>720</b> can utilize orientation sensing technology such as a magnetometer to detect the orientation of the communication device <b>700</b> (north, south, west, and east, as well as combined orientations in degrees, minutes, or other suitable orientation metrics). The UICC <b>730</b> can be a removable UICC or embedded UICC. The UICC <b>730</b> can have its own computing resources such as a microprocessor, memory and an input-output communication interface enabling it to be communicatively coupled to the controller <b>706</b> of the communication device. The UICC can execute a subscriber identity module application, a universal subscriber identity module, or an internet protocol multimedia services identity module application for managing communications between the communication device <b>700</b> and wireless base stations of a cellular communications network.

p-0048In a first one embodiment, one or more instances of the communication device <b>700</b> can be configured for receiving a request to modify a universal integrated circuit card, generating a package comprising configuration data for modifying the universal integrated circuit card, encrypting the package with a transport key to generate an encrypted package, and transmitting the encrypted package to a device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card. The one or more instances of the communication device <b>700</b> can also be configured for sharing the configuration data to enable a mobile network operator trusted service manager system to manage content and memory allocation of the universal integrated circuit card.

p-0049In a second embodiment, one or more instances of the communication device <b>700</b> can be configured for receiving a request to modify content in a mobile wallet security domain container of a universal integrated circuit card, verifying that resources of the universal integrated circuit card and a device communicatively coupled to the universal integrated circuit card are capable of satisfying the request, and generating a script according to the request. The one or more instances of the communication device <b>700</b> can also be configured for encrypting the script according to an application key to generate an encrypted script, instructing an over-the-air system to transmit the encrypted script, generating a package comprising the encrypted script and transport data, encrypting the package with a transport key to generate an encrypted package, and transmitting the encrypted package to the device communicatively coupled to the universal integrated circuit card to provision the content of the mobile wallet security domain container of the universal integrated circuit card. The one or more instances of the communication device <b>700</b> can further be configured for providing a mobile network operator trusted service manager system information relating to the provisioning of the mobile wallet security domain to manage content and memory allocation of the universal integrated circuit card.

p-0050In a third embodiment, one or more instances of the communication device <b>700</b> can be configured for receiving a first encrypted package, where the first encrypted package is encrypted by a subscription management data preparation system with an application key responsive to the subscription management data profile system receiving a request from a second service provider to modify a universal integrated circuit card with configuration data. The one or more instances of the communication device <b>700</b> can also be configured for sending to an over-the-air system of the first service provider a second package comprising the first encrypted package and transport data, encrypting the second package with a transport key to generate an encrypted second package, and transmitting the encrypted second package to a device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card with the configuration data. The one or more instances of the communication device <b>700</b> can further be configured for providing a mobile network operator system of the first service provider information relating to the configuration data to enable the mobile network operator trusted service manager system of the first operator to manage content and memory allocation of the universal integrated circuit card.

p-0051It should be understood that devices described in the exemplary embodiments can be in communication with each other via various wireless and/or wired methodologies. The methodologies can be links that are described as coupled, connected and so forth, which can include unidirectional and/or bidirectional communication over wireless paths and/or wired paths that utilize one or more of various protocols or methodologies, where the coupling and/or connection can be direct (e.g., no intervening processing device) and/or indirect (e.g., an intermediary processing device such as a router).

p-0052<figref idrefs="DRAWINGS">FIG. 8</figref> depicts an exemplary diagrammatic representation of a machine in the form of a computer system <b>800</b> within which a set of instructions, when executed, may cause the machine to perform any one or more of the methods describe above. One or more instances of the machine can operate, for example, as the devices shown in <figref idrefs="DRAWINGS">FIGS. 2</figref>, <b>4</b>, and <b>6</b>. In some embodiments, the machine may be connected (e.g., using a network <b>826</b>) to other machines. In a networked deployment, the machine may operate in the capacity of a server or a client user machine in server-client user network environment, or as a peer machine in a peer-to-peer (or distributed) network environment.

p-0053The machine may comprise a server computer, a client user computer, a personal computer (PC), a tablet PC, a smart phone, a laptop computer, a desktop computer, a control system, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine. It will be understood that a communication device of the subject disclosure includes broadly any electronic device that provides voice, video or data communication. Further, while a single machine is illustrated, the term “machine” shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methods discussed herein.

p-0054The computer system <b>800</b> may include a processor (or controller) <b>802</b> (e.g., a central processing unit (CPU), a graphics processing unit (GPU, or both), a main memory <b>804</b> and a static memory <b>806</b>, which communicate with each other via a bus <b>808</b>. The computer system <b>800</b> may further include a display unit <b>810</b> (e.g., a liquid crystal display (LCD), a flat panel, or a solid state display. The computer system <b>800</b> may include an input device <b>812</b> (e.g., a keyboard), a cursor control device <b>814</b> (e.g., a mouse), a disk drive unit <b>816</b>, a signal generation device <b>818</b> (e.g., a speaker or remote control) and a network interface device <b>820</b>. In distributed environments, the embodiments described in the subject disclosure can be adapted to utilize multiple display units <b>810</b> controlled by two or more computer systems <b>800</b>. In this configuration, presentations described by the subject disclosure may in part be shown in a first of the display units <b>810</b>, while the remaining portion is presented in a second of the display units <b>810</b>.

p-0055The disk drive unit <b>816</b> may include a tangible computer-readable storage medium <b>822</b> on which is stored one or more sets of instructions (e.g., software <b>824</b>) embodying any one or more of the methods or functions described herein, including those methods illustrated above. The instructions <b>824</b> may also reside, completely or at least partially, within the main memory <b>804</b>, the static memory <b>806</b>, and/or within the processor <b>802</b> during execution thereof by the computer system <b>800</b>. The main memory <b>804</b> and the processor <b>802</b> also may constitute tangible computer-readable storage media.

p-0056Dedicated hardware implementations including, but not limited to, application specific integrated circuits, programmable logic arrays and other hardware devices that can likewise be constructed to implement the methods described herein. Application specific integrated circuits and programmable logic array can use downloadable instructions for executing state machines and/or circuit configurations to implement embodiments of the subject disclosure. Applications that may include the apparatus and systems of various embodiments broadly include a variety of electronic and computer systems. Some embodiments implement functions in two or more specific interconnected hardware modules or devices with related control and data signals communicated between and through the modules, or as portions of an application-specific integrated circuit. Thus, the example system is applicable to software, firmware, and hardware implementations.

p-0057In accordance with various embodiments of the subject disclosure, the methods described herein are intended for operation as software programs running on a computer processor or other forms of instructions manifested as a state machine implemented with logic components in an application specific integrated circuit or field programmable array. Furthermore, software implementations can include, but not limited to, distributed processing or component/object distributed processing, parallel processing, or virtual machine processing can also be constructed to implement the methods described herein. It is further noted that a computing device such as a processor, a controller, a state machine or other suitable device for executing instructions to perform operations on a controllable device may perform such operations on the controllable device directly or indirectly by way of an intermediate device directed by the computing device.

p-0058While the tangible computer-readable storage medium <b>622</b> is shown in an example embodiment to be a single medium, the term “tangible computer-readable storage medium” should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term “tangible computer-readable storage medium” shall also be taken to include any non-transitory medium that is capable of storing or encoding a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methods of the subject disclosure.

p-0059The term “tangible computer-readable storage medium” shall accordingly be taken to include, but not be limited to: solid-state memories such as a memory card or other package that houses one or more read-only (non-volatile) memories, random access memories, or other re-writable (volatile) memories, a magneto-optical or optical medium such as a disk or tape, or other tangible media which can be used to store information. Accordingly, the disclosure is considered to include any one or more of a tangible computer-readable storage medium, as listed herein and including art-recognized equivalents and successor media, in which the software implementations herein are stored.

p-0060Although the present specification describes components and functions implemented in the embodiments with reference to particular standards and protocols, the disclosure is not limited to such standards and protocols. Each of the standards for Internet and other packet switched network transmission (e.g., TCP/IP, UDP/IP, HTML, HTTP) represent examples of the state of the art. Such standards are from time-to-time superseded by faster or more efficient equivalents having essentially the same functions. Wireless standards for device detection (e.g., RFID), short-range communications (e.g., Bluetooth, WiFi, Zigbee, or Near Field Communications or NFC), and long-range communications (e.g., WiMAX, GSM, CDMA, LTE) can be used by computer system <b>800</b>.

p-0061The illustrations of embodiments described herein are intended to provide a general understanding of the structure of various embodiments, and they are not intended to serve as a complete description of all the elements and features of apparatus and systems that might make use of the structures described herein. Many other embodiments will be apparent to those of skill in the art upon reviewing the above description. Other embodiments may be utilized and derived therefrom, such that structural and logical substitutions and changes may be made without departing from the scope of this disclosure. Figures are also merely representational and may not be drawn to scale. Certain proportions thereof may be exaggerated, while others may be minimized. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.

p-0062Although specific embodiments have been illustrated and described herein, it should be appreciated that any arrangement calculated to achieve the same purpose may be substituted for the specific embodiments shown. This disclosure is intended to cover any and all adaptations or variations of various embodiments. Combinations of the above embodiments, and other embodiments not specifically described herein, can be used in the subject disclosure.

p-0063The Abstract of the Disclosure is provided with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. In addition, in the foregoing Detailed Description, it can be seen that various features are grouped together in a single embodiment for the purpose of streamlining the disclosure. This method of disclosure is not to be interpreted as reflecting an intention that the claimed embodiments require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed embodiment. Thus the following claims are hereby incorporated into the Detailed Description, with each claim standing on its own as a separately claimed subject matter.